IN THE CLAIMS : 

Please amend claims 2, 3, 5-7, 10, 11-13, 14, 16, 21-23, 25-27, 29-31, 34-38, 40, 
45, 46, and 47 and cancel claims 1, 15, 24, and 39, without prejudice or disclaimer, as 
follows. 

1. (Cancelled) A method for authenticating a user of a data transfer device, 
comprising: 

setting up a data transfer connection from the data transfer device to a service 
access point; 

inputting identification data of a subscriber of a mobile communications system to 
the service access point; 

checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; and, 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal. 

2. (Currently Amended) A method according to claim 4-14, wherein the mobile 
subscriber identification data consist of a mobile subscriber international ISDN number 
MSISDN. 
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3. (Currently Amended) A method according to claim 144, wherein in connection 
with the check, a query is sent to the home location register of the mobile 
communications system. 

4. (Previously Presented) A method according to claim 3, wherein the mobile 
subscriber identification data consist of the mobile subscriber international ISDN 
number, and with the query first the home location register of the mobile communications 
system is searched for the international mobile subscriber identity IMSI corresponding to 
the mobile subscriber international ISDN number and then with the international mobile 
subscriber identity the home location register of the mobile communications system is 
searched for the related subscriber data, where the access right is defined. 

5. (Currently Amended) A method according to claim 4-14, wherein the password 
is transmitted to the subscriber terminal in a packet-switched message. 

6. (Currently Amended) A method according to claim 414, wherein the password 
is transmitted to the subscriber terminal in a short message. 

7. (Currently Amended) A method according to claim 414, wherein the data 
transfer connection between the data transfer device and the service access point is a 
radio link. 

-4- Application No.: 10/511,105 



8. (Previously Presented) A method according to claim 7, wherein the radio link is 
implemented using a wireless local area network. 

9. (Previously Presented) A method according to claim 7, wherein the radio link is 
implemented using a short-range radio transceiver. 

10. (Currently Amended) A method according to claim 4-14, wherein the data 
transfer connection between the data transfer device and the service access point is wired. 

1 1 . (Currently Amended) A method according to claim 4-14, wherein the method 
further comprises: billing for the data transfer connection between the data transfer 
device and the service access point in a bill directed to the identification data of the 
mobile subscriber. 

12. (Currently Amended) A method according to claim 414, wherein the data 
transfer connection initially set up between the data transfer device and the service access 
point is maintained until login. 

13. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 



-5- 



ApplicationNo.: 10/511,105 




setting up a data transfer connection from the data transfer device to a service 
access point; 

inputting identification data of a subscriber of a mobile communications system to 
the service access point; 

checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal A method according to claim 1 , wherein the method 
further comprises: ; and 

transmitting a second password from the service access point to the data transfer 
device over a data transfer connection, the second password being also used in 
connection with login. 

14. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 

setting up a data transfer connection from the data transfer device to a service 
access point; 

inputting identification data of a subscriber of a mobile communications system to 
the service access point; 
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checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal A method according to claim 1, wherein the method 
further comprises: ; and 

transmitting a confirmation identifier from the service access point to the data 
transfer device over a data transfer connection and transmitting the same confirmation 
identifier to the subscriber terminal together with the password, the password being only 
used if the received confirmation identifiers are the same. 

15. (Cancelled) A method according to claim 1, wherein the data transfer 
connection between the data transfer device and the service access point is set up when 
the subscriber terminal is roaming. 

16. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 

setting up a data transfer connection from the data transfer device to a service 
access point; 
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inputting identification data of a subscriber of a mobile communications system to 
the service access point; 

checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal A method according to claim 15 , wherein the data 
transfer connection between the data transfer device and the service access point is set up 
when the subscriber terminal is roaming; 

wherein the method further comprises: 

informing the subscriber terminal that if the roaming by the subscriber terminal in 
the visited mobile communications system fulfils a predetermined criterion, the data 
transfer connection from the data transfer device to the service access point is provided at 
a lower charge than usual; and 

implementing the data transfer connection from the data transfer device to the 
service access point at a lower charge than usual if the predetermined criterion is met. 

17. (Previously Presented) A method according to claim 16, wherein the method 
further comprises: receiving at the visited mobile communications system information 
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from the subscriber terminal indicating that a lower charge data transfer connection to the 
service access point is preferred. 

18. (Previously Presented) A method according to claim 17, wherein the method 
further comprises: receiving at the authentication server information from the visited 
mobile communications system indicating that the data transfer device of the user of the 
subscriber terminal will be provided with a lower charge data transfer connection to the 
service access point. 

19. (Previously Presented) A method according to claim 16, wherein the 
predetermined criterion is met if the subscriber terminal contacts the visited mobile 
communications system and/or if the subscriber terminal continues roaming in the visited 
mobile communications system for a predetermined time. 

20. (Previously Presented) A method according to claim 16, wherein to check 
whether the predetermined criterion is met, a periodic query is made to the home location 
register of the mobile subscriber's home mobile communications system. 

2 1 . (Currently Amended) A method according to claim ±14, wherein the method 
further comprises: using the mobile subscriber identification data as a user ID in 
connection with login. 
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22. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 

setting up a data transfer connection from the data transfer device to a service 
access point; 

inputting identification data of a subscriber of a mobile communications system to 
the service access point; 

checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal; and A method according to claim 1, wherein the 
method further comprises: 

transmitting a user ID to the subscriber terminal corresponding to the mobile 
subscriber identification data and using the transmitted user ID in connection with login. 

23. (Currently Amended) A method for authenticating a user of a data transfer 
device, comprising: 

setting up a data transfer connection from the data transfer device to a service 
access point; 
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inputting identification data of a subscriber of a mobile communications system to 
the service access point; 

checking from the mobile communications system whether the mobile subscriber 
identification data contains an access right to the service access point; 

if a valid access right exists, generating a password, transmitting the password to a 
subscriber terminal corresponding to the mobile subscriber identification data, and 
logging in to the service access point from the data transfer device using the password 
transmitted to the subscriber terminal; and A method according to claim U wherein the 
method further comprises: 

transmitting a user ID to the data transfer device over a data transfer connection 
and using the transmitted user ID in connection with login. 

24. (Cancelled) A system configured to authenticate a user of a data transfer 
device, comprising: 

a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 

an authentication server linked to the service access point over a second data 
transfer connection, 

wherein 
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the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 

the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, and 

the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point. 

25. (Currently Amended) A system according to claim 3438, wherein the 
identification data of the subscriber of the mobile communications system consist of the 
mobile subscriber international ISDN. 

26. (Currently Amended) A system according to claim 2438, wherein the 
authentication server is an Authentication, Authorization and Accounting AAA server. 

27. (Currently Amended) A system according to claim 2438, wherein for 
checking the access right to the service access point, the authentication server is 
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configured to transmit a query to the home location register of the mobile 
communications system. 

28. (Previously Presented) A system according to claim 27, wherein the 
identification data of the subscriber of the mobile communications system consist of the 
mobile subscriber international ISDN number, and the authentication server is configured 
to submit the query to first search the home location register of the mobile 
communications system for the international mobile subscriber identity corresponding to 
the mobile subscriber international ISDN number and then use the international mobile 
subscriber identity to search the home location register of the mobile communications 
system for the related subscriber data, where the access right is defined. 

29. (Currently Amended) A system according to claim 3438, wherein the 
authentication server is configured to transmit the password to the subscriber terminal in 
a packet-switched message. 

30. (Currently Amended) A system according to claim 3438, wherein the 
authentication server is configured to transmit the password to the subscriber terminal in 
a short message. 
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31. (Currently Amended) A system according to claim 3438, wherein the first 
data transfer connection is a radio link. 

32. (Previously Presented) A system according to claim 31, wherein the service 
access point is configured to implement the radio link using a wireless local area 
network. 

33. (Previously Presented) A system according to claim 31, wherein the service 
access point comprises a short-range radio transceiver for implementing the radio link. 

34. (Currently Amended) A system according to claim 3438, wherein the first 
data transfer connection is wired. 

35. (Currently Amended) A system according to claim 3438, wherein the system 
further comprises an accounting server, which is configured to generate the billing data 
relating to the first data transfer connection and to transfer the data to the mobile 
communications system, in which the billing data are formed into a bill associated with 
the identification data of the subscriber of the mobile communications system. 
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36. (Currently Amended) A system according to claim 3438, wherein the service 
access point is configured to maintain the first data transfer connection initially set up 
between the data transfer device and the service access point until login. 

37. (Currently Amended) A system configured to authenticate a user of a data 
transfer device, comprising: 

a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 

an authentication server linked to the service access point over a second data 
transfer connection, 

wherein 

the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 

the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, 
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the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point A system 
according to claim 2 4, wherein and 

the authentication server is configured to transmit a second password from the 
service access point to the data transfer device over the first data transfer connection and 
the data transfer device is configured to also use the second password in connection with 
login. 

38. (Currently Amended) A system configured to authenticate a user of a data 
transfer device, comprising: 
a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 

an authentication server linked to the service access point over a second data 
transfer connection, 

wherein 

the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 
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the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, 

the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point A system 
according to claim 24 , wherein and 

the authentication server is configured to transmit a confirmation identifier via the 
service access point to the data transfer device over the first data transfer connection and 
to transmit the same confirmation identifier to the subscriber terminal together with the 
password. 

39. (Cancelled) A system according to claim 24, wherein the first data transfer 
connection is set up when the subscriber terminal is roaming. 

40. (Currently Amended) A system configured to authenticate a user of a data 
transfer device, comprising: 

a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 
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an authentication server linked to the service access point over a second data 
transfer connection, 
wherein 

the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 

the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, 

the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point A system 
according to claim 39 , wherein 

the first data transfer connection is set up when the subscriber terminal is roaming, 

and 

the visited mobile communications system is configured to inform the subscriber 
terminal that if the roaming by the subscriber terminal in the visited mobile 
communications system fulfils a predetermined criterion, the data transfer connection 
from the data transfer device to the service access point is provided at a lower charge than 
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usual, and the authentication server is configured to implement the data transfer 
connection from the data transfer device to the service access point at a lower charge than 
usual if the predetermined criterion is met. 

41. (Previously Presented) A system according to claim 40, wherein the visited 
mobile communications system is configured to receive from the subscriber terminal 
information indicating that a data transfer connection to the service access point provided 
at a lower charge than usual is preferred. 

42. (Previously Presented) A system according to claim 41, wherein the 
authentication server is configured to receive from the visited mobile communications 
system information indicating that the data transfer device of the user of the subscriber 
terminal will be provided with a data transfer connection to the service access point 
implemented at a lower charge than usual. 

43. (Previously Presented) A system according to claim 40, wherein the 
predetermined criterion is met if the subscriber terminal contacts the visited mobile 
communications system and/or if the subscriber terminal continues roaming in the visited 
mobile communications system continues for a predetermined time. 
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44. (Previously Presented) A system according to claim 40, wherein to check 
whether the predetermined criterion is met, a periodic query is made to the home location 
register of the home mobile communications system of the subscriber terminal. 

45. (Currently Amended) A system according to claim 3438, wherein the data 
transfer device is configured to use the mobile subscriber identification data as the 
password to log in to the service access point. 

46. (Currently Amended) A system configured to authenticate a user of a data 
transfer device, comprising: 

a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 

an authentication server linked to the service access point over a second data 
transfer connection, 

wherein 

the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 
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the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, 

the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point A system 
according to claim 2 4 , wherein and 

the authentication server is configured to transmit a user ID to the subscriber 
terminal corresponding to the identification data of the subscriber of the mobile 
communications system and the data transfer device is configured to use the user ID 
transmitted to the subscriber terminal in connection with login to the service access point. 

47. (Currently Amended) A system configured to authenticate a user of a data 
transfer device, comprising: 
a data transfer device; 

a service access point that can be linked to the data transfer device over a first data 
transfer connection; and 

an authentication server linked to the service access point over a second data 
transfer connection, 

wherein 
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the service access point is configured to receive over the first data transmission 
connection identification data of a subscriber of a mobile communications system 
inputted from the data transfer device and to transmit the mobile subscriber identification 
data to the authentication server over the second data transfer connection, 

the authentication server is configured to check from the mobile communications 
system over a third data transfer connection whether the mobile subscriber identification 
data contains an access right to the service access point and, if a valid access right exists, 
to generate a password and transmit the password to a subscriber terminal corresponding 
to the identification data of the subscriber of the mobile communications system, 

the data transfer device is configured to use the password transmitted to the 
subscriber terminal in connection with login to the service access point A system 
according to claim 24 , wherein and 

the authentication server is configured to transmit the user ID via the service 
access point to the data transfer device over the first data transfer connection and the data 
transfer device is configured to use the user ID transmitted to the data transfer device in 
connection with login to the service access point. 
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